-----Original Message-----
From: martin.pal...@gmail.com [mailto:martin.pal...@gmail.com] On Behalf Of 
Martin Paljak
Sent: Thursday, September 08, 2011 3:35 PM
To: Witvliet, J, CDC/IVENT/OPS/I&S/HIN
Cc: opensc-devel@lists.opensc-project.org
Subject: Re: [opensc-devel] serialnumber

Hello,

On Thu, Sep 8, 2011 at 13:27,  <j.witvl...@mindef.nl> wrote:
> According to the openvpn-docu, (at the server-side) one of their environment 
> variables, "tls_id_0" should contain the hexadecimal value of the certificate.
> In reality in contains completely other fields, like CN=, OU=, O= and C=.

I guess the tls_id_0 should contain exactly this, the subject of the
certificate?

> Is there any tool to lookup the serialnumber of a certificate stored on a 
> smartcard directly?
> I know I can export the certificate manually and use openssl to analyse it, 
> but can it be done with one of the pkcs* open opensc* tools?

pkcs15-tool --read-certificate <num> | openssl x509 -text

-----Original Message-----

Would like to try it, but the pkcs15-tool fails with "unsupported card"

With pkcs11-tool I hev to provide "--module /usr/lib/libaetpkss.so.3.0" .
But pkcs15-tool does not have the "--module" option.


hw

______________________________________________________________________
Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet 
de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u 
verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat 
aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband 
houdt met risico's verbonden aan het elektronisch verzenden van berichten.

This message may contain information that is not intended for you. If you are 
not the addressee or if this message was sent to you by mistake, you are 
requested to inform the sender and delete the message. The State accepts no 
liability for damage of any kind resulting from the risks inherent in the 
electronic transmission of messages.
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to